Our website is set to allow the use of cookies. For more information and to change settings click here. If you are happy with cookies please click "Continue" or simply continue browsing. Continue.

Employment Law

Legal guidance - compliance - software

Veale Wasborough Vizards , 01 SEP 2015

Subject access requests - High Court considers motive and proportionality

Subject access requests - High Court considers motive and proportionality
Andrew Gallie
Senior Associate, Veale Wasbrough Vizards

Individuals have a right to the information which an organisation holds about them under the Data Protection Act ('DPA'). This is known as a 'subject access request', or SAR.

This can be bad news for employers, particularly where they hold a considerable amount of information about someone. Individuals will often make SARs in order to try and force disclosure of information which might assist in a dispute.

The Information Commissioner's Office ('ICO') takes a very wide view of the obligation to provide information, and considers that organisations must go to great lengths to ensure that any request is dealt with thoroughly (even if it might involve a lot of time and effort). 

However, there is a growing body of case law which points to a narrower approach.

This is demonstrated by the recent case of Dawson-Damer and others v Taylor Wessing LLP and others. The claimants sought orders requiring the defendant, a firm of solicitors, to comply with their SAR. The defendants had previously refused on the basis that they were entitled to use the blanket exemption for legal professional privilege. The court refused the claimant's application on the basis that it was not reasonable or proportionate for the firm to conduct lengthy and costly searches to see if any information was potentially disclosable.

Proportionality

The obligation under the DPA is to carry out a 'reasonable and proportionate' search. In Dawson-Damer, it was held that the search would have been disproportionately costly given the need to separate out all of the data protected by legal professional privilege.

In contrast, the ICO stress that the obligation to carry out a 'reasonable and proportionate' search is an obligation to make extensive efforts to find and retrieve information.

Motive

Although the court was satisfied that carrying out the searches would not be reasonable and proportionate, the court also found that the SAR would have been refused in any event because it was made to obtain documents to assist with litigation. The judge stated that the purpose of the SAR provisions is to enable individuals to check whether their personal data is being processed in a way which unlawfully infringes that privacy. It is not intended to allow an individual to obtain documents that might assist with .litigation, as was found in this case.

However, the ICO has stated that the DPA does not allow organisations to refuse to comply with a SAR simply where the requestor has begun or contemplates litigation.

Best practice

Dawson-Damer
demonstrates once again the apparent differing approaches taken by the courts and the ICO.

Employers should therefore consider what would be the best approach on a case by case basis, but the recent court decisions may give confidence to those employers who wish to adopt a narrow view of their obligations.

TUPE

Law and Practice

The status of employment rights on the transfer of an undertaking is an extremely complex area of...

More Info from £85.00
Available in Employment Law Online
EU & International Employment Law

EU & International Employment Law

"A very welcome addition to the very limited range of material available on domestic employment...

More Info £1,272.00
Available in Employment Law Online
Subscribe to our newsletters